nerdexam
CompTIA

SG0-001 · Question #343

In a switched fabric environment there is a need for security control of the FC switching infrastructure. Which of the following should be implemented to give the STRONGEST level of protection?

The correct answer is C. Hard zoning. To achieve the strongest security control within a Fibre Channel switched fabric, the most robust form of zoning should be implemented.

Storage Connectivity

Question

In a switched fabric environment there is a need for security control of the FC switching infrastructure. Which of the following should be implemented to give the STRONGEST level of protection?

Options

  • ALUN masking
  • BSoft zoning
  • CHard zoning
  • DPort mapping

How the community answered

(53 responses)
  • A
    2% (1)
  • B
    4% (2)
  • C
    92% (49)
  • D
    2% (1)

Why each option

To achieve the strongest security control within a Fibre Channel switched fabric, the most robust form of zoning should be implemented.

ALUN masking

LUN masking is a storage array feature that controls access to LUNs at the storage level, not a security control for the Fibre Channel switching infrastructure itself.

BSoft zoning

Soft zoning relies on the Fibre Channel Name Server for enforcement and is less secure than hard zoning because devices could potentially ignore zone information or spoof WWNs to gain unauthorized access.

CHard zoningCorrect

Hard zoning provides the strongest level of security in a Fibre Channel fabric by enforcing access control at the physical switch port level. This ensures that devices connected to specific ports can only communicate with other devices in the same zone, effectively preventing unauthorized communication even if a World Wide Name (WWN) is spoofed.

DPort mapping

Port mapping is not a recognized or standard Fibre Channel security mechanism that provides a strong level of protection for the switching infrastructure.

Concept tested: Fibre Channel hard zoning security

Source: https://www.cisco.com/c/en/us/support/docs/storage-networking/mds-9000-series-multilayer-san-switches/44585-soft-hard-zone.html

Topics

#FC zoning#hard zoning#SAN security

Community Discussion

No community discussion yet for this question.

Full SG0-001 Practice